Updated SafariCacheSQLiteDatabaseFile artifact definition (#564)

ForensicArtifacts · Jun 1, 2023 · c8b92c0 · c8b92c0
1 parent e558fbb
commit c8b92c0
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/data/webbrowser.yaml b/data/webbrowser.yaml
@@ -1267,6 +1267,8 @@ sources:
     paths:
     - '%%users.homedir%%/Library/Caches/com.apple.Safari/Cache.db'
     - '%%users.homedir%%/Library/Caches/com.apple.Safari/Cache.db-wal'
+    - '%%users.homedir%%/Library/Containers/com.apple.Safari/Data/Library/Caches/com.apple.Safari/Cache.db'
+    - '%%users.homedir%%/Library/Containers/com.apple.Safari/Data/Library/Caches/com.apple.Safari/Cache.db-wal'
   supported_os: [Darwin]
 - type: FILE
   attributes: